App Review Shadow Defender Ransomware Test

[bribon77]

Content source

https://www.youtube.com/channel/UCDVywVvXaCnJKjJHR25cnsw

 

[17410742]

Great Job @bribon77

exactly why i use it & exactly why i dont use signature based protections.

CCAV + Shadow Defender
CF + Shadow Defender
VoodooShield + Shadow Defender

Take ya pick

The endless setups of a crazy amount of software are just not needed.

CCAV, VS, CF > ALL FREE.
SD is a lifetime licence that is super cheap.

Better security, costs less, no endless definitions or product updates needed & much better on resources too.

 

[Dave Russo]

Thanks for posting,Looks like this program is going on my wish list, has it ever been breached?

 

[bribon77]

Shadow Defender is a great program without a doubt.
It's not my video but I like it and that's why I share it.

 

[LDogg]

Looks like a great product from that demonstration.

~LDogg

 

[bribon77]

has it ever been breached?

Not that I know. I have also done many tests with different types of Malware on my own and never, failed me.
I have a license for a promotion that was made in MT

 

[HarborFront]

Will the result be any different if you'll to use VirtualBox or VMWare both of which are also free?

 

[Dave Russo]

Great Job @bribon77

exactly why i use it & exactly why i dont use signature based protections.

CCAV + Shadow Defender
CF + Shadow Defender
VoodooShield + Shadow Defender

Take ya pick

The endless setups of a crazy amount of software are just not needed.

CCAV, VS, CF > ALL FREE.
SD is a lifetime licence that is super cheap.

Better security, costs less, no endless definitions or product updates needed & much better on resources too.

I'm really interested in following one of your set ups,I now have a copy of Shadow Defender ,but how often do you use it in Shadow mode? and what do I have to be careful about? , its ok if you do not respond, just hoping for a hands on person suggestions. Thanks

 

[bribon77]

I'm really interested in following one of your set ups,I now have a copy of Shadow Defender ,but how often do you use it in Shadow mode? and what do I have to be careful about? , its ok if you do not respond, just hoping for a hands on person suggestions. Thanks

I use it punctually to test programs or malwares. the configuration I use is by default, I do not touch anything.

My configuration is here ..

Advanced Plus Security - bribon77 Security Config 2019

That's my configuration. For 2019.:giggle:

malwaretips.com

 

[Andy Ful]

I use Shadow Defender daily in the shadow mode on boot. It is very useful but:

1. It cannot protect you against the infections, but only keeps your disk (in shadow mode) untouched.
2. The malware can spy you, steal credentials and confidential data, infect the router, etc.
3. The malware can get persistence by infecting the router.
4. You can be infected by the ransomware, and this can affect the data on the external drives, which are not in the shadow mode.
5. Sometimes Windows tries to update in the shadow mode.
6. Sometimes Shadow Defender can cause problems after upgrade (never happened to me).

Yet, Shadow Defender has so many advantages ...

Post edited.
I am not sure about protecting the EFI system partition, but SD should protect it too.

 

[Dave Russo]

I use it punctually to test programs or malwares. the configuration I use is by default, I do not touch anything.

My configuration is here ..

Advanced Plus Security - bribon77 Security Config 2019

That's my configuration. For 2019.:giggle:

malwaretips.com

Thank you ,appreciated!

I use Shadow Defender daily in the shadow mode on boot. It is very useful but:

1. It cannot protect you against the infections, but only keeps your disk (in shadow mode) untouched.
2. The malware can spy you, steal credentials and confidential data, infect the router, etc.
3. The malware can get persistence by infecting the router or UEFI.
4. You can be infected by the ransomware, and this can affect the data on the external drives, which are not in the shadow mode.
5. Sometimes Windows tries to update in the shadow mode.
6. Sometimes Shadow Defender can cause problems after upgrade (never happened for me).

Yet, Shadow Defender has so many advantages ...

Thank you ,appreciated!

 

[17410742]

I'm really interested in following one of your set ups,I now have a copy of Shadow Defender ,but how often do you use it in Shadow mode? and what do I have to be careful about? , its ok if you do not respond, just hoping for a hands on person suggestions. Thanks

always in shadow mode.

I only ever leave SM when there are sufficient windows/app updates

 

[ichito]

I use Shadow Defender daily in the shadow mode on boot. It is very useful but:

1. It cannot protect you against the infections, but only keeps your disk (in shadow mode) untouched.
2. The malware can spy you, steal credentials and confidential data, infect the router, etc.
3. The malware can get persistence by infecting the router or UEFI.
4. You can be infected by the ransomware, and this can affect the data on the external drives, which are not in the shadow mode.
5. Sometimes Windows tries to update in the shadow mode.
6. Sometimes Shadow Defender can cause problems after upgrade (never happened to me).

Yet, Shadow Defender has so many advantages ...

Hi Andy...ad vocem
1 - yes, SD have no "anti-whatever" module but actualy it protect giving us something like "honeypot system"
2- yes, SD can't protect against data leaking...every information/data what are sent outside the system are just sent, canot be controlled and never will come back
3 - look at #2
4 - yes, but every local disk...removable also...can be supported by SD and you can enable SM...if you want/need
5 - yes, but it's related to every apps including security apps...you can create needed exclusions...IOS exclusion is also avaliable but not reasonable
6 - it's related rather to Win10 and newstill unstable builds.

BTW - SD is...repeting words from Wilders as I remeber - the best piece of code that was ever made.

 

[Andy Ful]

Hi Andy...ad vocem
1 - yes, SD have no "anti-whatever" module but actualy it protect giving us something like "honeypot system"
2- yes, SD can't protect against data leaking...every information/data what are sent outside the system are just sent, canot be controlled and never will come back
3 - look at #2
4 - yes, but every local disk...removable also...can be supported by SD and you can enable SM...if you want/need
5 - yes, but it's related to every apps including security apps...you can create needed exclusions...IOS exclusion is also avaliable but not reasonable
6 - it's related rather to Windows 10 and newstill unstable builds.

BTW - SD is...repeting words from Wilders as I remeber - the best piece of code that was ever made.

I totally agree.
That is why I use it for so many years. The points I noted, do not diminish its value and usefulness, but rather show what Shadow Defender is not.

 

[SumTingWong]

Shadow Defender is my friend.

Will the result be any different if you'll to use VirtualBox or VMWare both of which are also free?

VMWare is free?!

 

[kylprq]

1. The malware can spy you, steal credentials and confidential data, infect the router, etc.
2. The malware can get persistence by infecting the router.

how we can understand if router is infected ?

 

[ForgottenSeer 69673]

Shadow Defender is my friend.


VMWare is free?!

VMware Player is free

 

[Andy Ful]

how we can understand if router is infected ?

If you removed the malware from the disk, and it reappears magically after connecting to the Internet, then one of the possibilities is infected router. You can also see that your web browser is hijacked in some way without signs of disk infection. You have to look at the router settings if they were changed, especially DNS settings, port forwarding, etc.
But the nasty infections can be virtually invisible for the user, when they spy for credentials and passwords (VPNFilter malware).
In many cases the malware can be removed by disconnecting the rooter from the internet, rebooting it, and changing the default login credentials. Reconfiguring the router to refer directly to the Google Public DNS servers (or another well known public servers) can prevent against DNS cache poisoning. But in some cases, the firmware update is required.
The malware can even upload a custom OS to your router with disabled updates and uploads - in this case flashing the storage directly would be required. But, it will be simpler to buy a new router.
The users can harden the router settings via strong password on the administrative page, enabling MAC address filtering, disabling the remote management, enabling WPA2 encryption (or WPA3 if available) with a strong password, hiding wireless network SSID, using static IP addresses and Net Mask, etc.

Using Shadow Defender with hardened router settings can prevent malware persistence.

 

[SumTingWong]

VMware Player is free

VM Player is the same as VirtualBox?

 

[HarborFront]

I use Shadow Defender daily in the shadow mode on boot. It is very useful but:

1. It cannot protect you against the infections, but only keeps your disk (in shadow mode) untouched.
2. The malware can spy you, steal credentials and confidential data, infect the router, etc.
3. The malware can get persistence by infecting the router.
4. You can be infected by the ransomware, and this can affect the data on the external drives, which are not in the shadow mode.
5. Sometimes Windows tries to update in the shadow mode.
6. Sometimes Shadow Defender can cause problems after upgrade (never happened to me).

Yet, Shadow Defender has so many advantages ...

Post edited.
I am not sure about protecting the EFI system partition, but SD should protect it too.

Just add to the CONS of SD

1. It cannot protect against hardware-based attacks like Spectre and Meltdown
2. It cannot protect the host machine from being fingerprinted unlike using VirtualBox/VMWare